General

  • Target

    e5eead4cad8cd20528afc682acdfc12ffb5793e6899c67f8fe4b0345613cb6ea

  • Size

    3.0MB

  • Sample

    250112-hmc6ps1nev

  • MD5

    862749ce12d319d66e3263dd04ec4612

  • SHA1

    f253315985311ae444fb97600ee170e0bc1acf06

  • SHA256

    e5eead4cad8cd20528afc682acdfc12ffb5793e6899c67f8fe4b0345613cb6ea

  • SHA512

    84672f5789fc647456140245c833fa8bfecefecfe0eabfb3de035ab023483e7601c3a723022deb26865d300b5736241ca9e4c58ceb3cc1a95d5c68a1acad6568

  • SSDEEP

    49152:5wBL0WNtmMOWpYTJwU7bKcfh+QLAFzKAIGINInG7xxZ:5wBL0WNtmMZpYT37bvh5LAFRIGIOn0LZ

Malware Config

Extracted

Family

gcleaner

C2

62.197.136.41

87.251.71.107

62.197.136.196

2.56.57.69

Attributes
  • url_path

    /i.php

    /get.php

    /setup.php

    /setup.php

Targets

    • Target

      e5eead4cad8cd20528afc682acdfc12ffb5793e6899c67f8fe4b0345613cb6ea

    • Size

      3.0MB

    • MD5

      862749ce12d319d66e3263dd04ec4612

    • SHA1

      f253315985311ae444fb97600ee170e0bc1acf06

    • SHA256

      e5eead4cad8cd20528afc682acdfc12ffb5793e6899c67f8fe4b0345613cb6ea

    • SHA512

      84672f5789fc647456140245c833fa8bfecefecfe0eabfb3de035ab023483e7601c3a723022deb26865d300b5736241ca9e4c58ceb3cc1a95d5c68a1acad6568

    • SSDEEP

      49152:5wBL0WNtmMOWpYTJwU7bKcfh+QLAFzKAIGINInG7xxZ:5wBL0WNtmMZpYT37bvh5LAFRIGIOn0LZ

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Gcleaner family

MITRE ATT&CK Enterprise v15

Tasks